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DETAILED ACTION 

1 . Applicant's arguments filed January 18, 2005, have been fully considered but 
they are not persuasive. 

Response to Amendment 

2. Examiner approves the replacement sheet for figure 4 received on January 18, 
2005. Examiner approves the amendment to the specification received on January 18, 
2005. The objection to the drawings is withdrawn. 

3. Examiner approves the amendment to the abstract of the disclosure. The 
objection to the abstract of the disclosure is withdrawn. 

4. Examiner withdraws the objection to the incorporation by reference of the 
Internet Key Exchange Protocol (IKE, RFC 2409), the Security Architecture for the 
Internet Protocol (IP Security, RFC 2401), and the Internet Security Association and 
Key Management Protocol (ISAKMP, RFC 2408). 

5. Examiner withdraws the objection to the disclosure regarding the terms not 
defined. 

6. Examiner withdraws the objection to claims 34 and 40 relating to the term CPU. 

7. During the telephonic interview it was agreed that Mann et al. does not expressly 
disclose using a reason information wherein the reason information is "no reason", 
"error", "user initiated", etc as specified in the disclosure of the application (page 8, lines 
1-6) but not claimed. Mann et al. teach transferring messages, including commands and 
responses, among nodes in a network. Furthermore, Mann et al. disclose the command 
messages including requests to be performed at a receiving node. 
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Claim Rejections - 35 USC § 102 

8. The following is a quotation of the appropriate paragraphs of 35 U.S.C. 102 that 
form the basis for the rejections under this section made in this Office action: 

A person shall be entitled to a patent unless - 

(b) the invention was patented or described in a printed publication in this or a foreign country or in public 
use or on sale in this country, more than one year prior to the date of application for patent in the United 
States. 

9. Claims 1, 6, 7, 12, 13, 14, 19, 24, 25, 26, 31, 32, 33, 34, 39, 40, and 45 are 
rejected under 35 U.S.C. 102(b) as being anticipated by Mann, et al. 

Regarding claims 1 and 14, Mann, et al. teach a method for generating a control 
message to be transmitted from a first network device to a second network device in a 
data network, the control message relating to an action to be performed at the second 
network device, the method comprising: 

- determining a first control message to be generated (column 1, lines 40-42); 

- identifying reason information relating to at least one reason for generating 
the first control message (column 1, lines 44-49 and 62-68); and 

- generating the first control message, the first control message including said 
reason information (column 1, lines 40-42). 

Furthermore, with respect to claim 14, Mann, et al. teach a computer program 
product for generating a control message (column 5, lines 16-29). 

With respect to claim 6, Mann, et al. teach the method of claim 1 further 
comprising transmitting the first control message to the second network device (column 
3, lines 36-43) to thereby cause the second network device to implement an appropriate 
action in response to the first control message (column 2, lines 61-68). 
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With respect to claims 7 and 19, Mann, et al. teach a method for communicating 
between nodes in a data network, the method comprising: 

- receiving a first control message from a first node, the control message 
including reason information relating to at least one reason for the generation 
of the first control message (column 1, lines 40-53 and 54-56); 

- identifying the reason information (column 1, lines 56-58); 

- determining an appropriate response to the first control message using at 
least said reason information (column 1, lines 58-62); and 

- implementing said appropriate response (column 1, lines 62-68). 
Furthermore, with respect to claim 19, Mann, et al. teach a computer program 

product for communicating between nodes in a data network (column 5, lines 16-29). 

With respect to claim 12, Mann, et al. teach the method of claim 7 further 
comprising: 

- implementing a first response to the first control message if the reason 
information includes a first reason code (column 2, lines 61-68); and 

- implementing a second response to the control message if the reason 
information includes a second reason code (column 13, lines 1-17 and 53-61, 
column 15, lines 8-22, figure 6B, number 103, figures 6E and 6F). 

With respect to claim 13, Mann, et al. teach the method of claim 7 wherein the 
control message relates to an action to be performed at a network device receiving the 
control message (column 2, lines 61-68). 
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With respect to claim 24, Mann, et al. teach the computer program product of 
claim 19 further comprising: 

- computer code for implementing a first response to the first control message if 
the reason information includes a first reason code (column 2, lines 61-68); 
and 

- computer code for implementing a second response to the control message if 
the reason information includes a second reason code (column 13, lines 1-17 
and 53-61, figure 6B, number 103). 

With respect to claim 25, Mann, et al. teach the computer program product of 
claim 1 9 wherein the control message relates to an action to be performed at a network 
device receiving the control message (column 2, lines 61-68). 

With respect to claim 26, Mann, et al. teach a system for communicating between 
nodes in a data network, the system comprising: 

- means for receiving a first control message from a first node, the control 
message including reason information relating to at least one reason for the 
generation of the first control message (column 1, lines 40-53 and 54-56); 

- means for identifying the reason information (column 1 , lines 56-58); 

- means for determining an appropriate response to the first control message 
using at least said reason information (column 1, lines 58-62); and 

- means for implementing said appropriate response (column 1, lines 62-68). 
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With respect to claim 31, Mann, et al. teach the system of claim 26 further 
comprising means for transmitting the first control message to the second network 
device (column 3, lines 36-43) to thereby cause the second network device to 
implement an appropriate action in response to the first control message (column 2, 
lines 61-68). 

With respect to claim 32, Mann, et al. teach the system of claim 26 further 
comprising: 

- means for implementing a first response to the first control message if the 
reason information includes a first reason code (column 2, lines 61-68); and 

- means for implementing a second response to the control message if the 
reason information includes a second reason code (column 13, lines 1-17 and 
53-61, figure 6B, number 103). 

With respect to claim 33, Mann, et al. teach the system of claim 26 wherein the 
control message relates to an action to be performed at a network device receiving the 
control message (column 2, lines 61-68). 

With respect to claim 34, Mann, et al. teach a system for generating a control 
message to be transmitted to a network device in a data network, the control message 
relating to an action to be performed at the network device, the system comprising: 

- at least one CPU (column 2, lines 34-38); 
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- memory (column 2, lines 34-38); and 

- at least one interface for communicating with the network device (figure 2, 
number 19); 

- the system being configured or designed to determine a first control message 
to be generated (column 1 , lines 40-42); 

- the system being further configured or designed to identify reason information 
relating to at least one reason for generating the first control message 
(column 1, lines 44-49 and 62-68); and 

- the system being further configured or designed to generate the first control 
message, wherein the first control message includes said reason information 
(column 1 , lines 40-42). 

With respect to claim 39, Mann, et al. teach the system of claim 34 being further 
configured or designed to transmit the first control message to a second network device 
(column 5, lines 30-37) to thereby cause the second network device to implement an 
appropriate action in response to the first control message (column 5, lines 37-52). 

With respect to claim 40, Mann, et al. teach a system for communicating between 
nodes in a data network, the system comprising: 

- at least one CPU (column 2, lines 34-38); 

- memory (column 2, lines 34-38); and 

- at least one interface for communicating with at least one network device 
(figure 2, number 19); 
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- the system being configured or designed to receive a first control message 
from a first node, the control message including reason information relating to 
at least one reason for the generation of the first control message (column 1 , 
lines 54-56); 

- the system being further configured or designed to identify the reason 
information (column 1, lines 56-58); 

- the system being further configured or designed to determine an appropriate 
response to the first control message using at least said reason information 
(column 1 , lines 58-62); and 

- the system being further configured or designed to implement said 
appropriate response (column 1, lines 62-68). 

With respect to claim 45, Mann, et al. teach the system of claim 40 further 
comprising: 

- the system being further configured or designed to implement a first response 
to the first control message if the reason information includes a first reason 
code (column 2, lines 61-68); and 

- the system being further configured or designed to implement a second 
response to the control message if the reason information includes a second 
reason code (column 13, lines 1-17 and 53-61, figure 6B, number 103). 
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Claim Rejections - 35 USC § 103 

10. The following is a quotation of 35 U.S.C. 103(a) which forms the basis for all 
obviousness rejections set forth in this Office action: 

(a) A patent may not be obtained though the invention is not identically disclosed or described as set 
forth in section 102 of this title, if the differences between the subject matter sought to be patented and 
the prior art are such that the subject matter as a whole would have been obvious at the time the 
invention was made to a person having ordinary skill in the art to which said subject matter pertains. 
Patentability shall not be negatived by the manner in which the invention was made. 

1 1 . Claims 2, 3, and 4 are rejected under 35 U.S.C. 103(a) as being unpatentable 
over Mann, et al. as applied to claim 1 above, and further in view of Troxel, et al. 

Mann, et al. teach the limitations as set forth under claim 1 above. However, 
Mann, et al. do not disclose expressly that the Internet Key Exchange Protocol (IKE), 
the Security Architecture for the Internet Protocol (IP Security), or the Internet Security 
Association and Key Management Protocol (ISAKMP) may be used. 

Troxel, et al. teach sending messages between nodes in a network using IPSec 
protocols (RFC 2401), Internet Key Exchange Protocol (RFC 2409), and Internet 
Security Association and Key Management Protocol (RFC 2408) (page 5, column 2, 
paragraph 0070). 

Mann, et al. and Troxel, et al. are analogous art because they are from the same 
field of endeavor, sending messages between nodes in a communications network. 

At the time of the invention it would have been obvious to a person of ordinary 
skill in the art to use these three protocols to send messages between nodes in a 
communications network. 
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The suggestion/motivation for doing so would have been to protect the messages 
from spoofing attacks. 

Therefore, it would have been obvious to combine Mann, et al. and Troxel, et al. 
for the benefit of sending messages between nodes in a communications network to 
obtain the invention as specified in claims 2, 3, and 4. 

Claims 8, 9, and 10 are rejected under 35 U.S.C. 103(a) as being unpatentable 
over Mann, et al. as applied to claim 7 above, and further in view of Troxel, et al. 

Mann, et al. teach the limitations as set forth under claim 7 above. However, 
Mann, et al. do not disclose expressly that the Internet Key Exchange Protocol (IKE), 
the Security Architecture for the Internet Protocol (IP Security), or the Internet Security 
Association and Key Management Protocol (ISAKMP) may be used. 

Troxel, et al. teach sending messages between nodes in a network using IPSec 
protocols (RFC 2401), Internet Key Exchange Protocol (RFC 2409), and Internet 
Security Association and Key Management Protocol (RFC 2408) (page 5, column 2, 
paragraph 0070). 

Mann, et al. and Troxel, et al. are analogous art because they are from the same 
field of endeavor, sending messages between nodes in a communications network. 

At the time of the invention it would have been obvious to a person of ordinary 
skill in the art to use these three protocols to send messages between nodes in a 
communications network. 
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The suggestion/motivation for doing so would have been to protect the messages 
from spoofing attacks. 

Therefore, it would have been obvious to combine Mann, et al. and Troxel, et al. 
for the benefit of sending messages between nodes in a communications network to 
obtain the invention as specified in claims 8, 9, and 10. 

Claims 15, 16, and 17 are rejected under 35 U.S.C. 103(a) as being 
unpatentable over Mann, et al, as applied to claim 14 above, and further in view of 
Troxel, et al. 

Mann, et al. teach the limitations as set forth under claim 14 above. However, 
Mann, et al. do not disclose expressly that the Internet Key Exchange Protocol (IKE), 
the Security Architecture for the Internet Protocol (IP Security), or the Internet Security 
Association and Key Management Protocol (ISAKMP) may be used. 

Troxel, et al. teach sending messages between nodes in a network using IPSec 
protocols (RFC 2401), Internet Key Exchange Protocol (RFC 2409), and Internet 
Security Association and Key Management Protocol (RFC 2408) (page 5, column 2, 
paragraph 0070). 

Mann, et al. and Troxel, et al. are analogous art because they are from the same 
field of endeavor, sending messages between nodes in a communications network. 

At the time of the invention it would have been obvious to a person of ordinary 
skill in the art to use these three protocols to send messages between nodes in a 
communications network. 
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The suggestion/motivation for doing so would have been to protect the messages 
from spoofing attacks. 

Therefore, it would have been obvious to combine Mann, et al. and Troxel, et al. 
for the benefit of sending messages between nodes in a communications network to 
obtain the invention as specified in claims 15, 16, and 17. 

Claims 20, 21 and 22 are rejected under 35 U.S.C. 103(a) as being unpatentable 
over Mann, et al. as applied to claim 19 above, and further in view of Troxel, et al. 

Mann, et al. teach the limitations as set forth under claim 19 above. However, 
Mann, et al. do not disclose expressly that the Internet Key Exchange Protocol (IKE), 
the Security Architecture for the Internet Protocol (IP Security), or the Internet Security 
Association and Key Management Protocol (ISAKMP) may be used. 

Troxel, et al. teach sending messages between nodes in a network using IPSec 
protocols (RFC 2401), Internet Key Exchange Protocol (RFC 2409), and Internet 
Security Association and Key Management Protocol (RFC 2408) (page 5, column 2, 
paragraph 0070). 

Mann, et al. and Troxel, et al. are analogous art because they are from the same 
field of endeavor, sending messages between nodes in a communications network. 

At the time of the invention it would have been obvious to a person of ordinary 
skill in the art to use these three protocols to send messages between nodes in a 
communications network. 
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The suggestion/motivation for doing so would have been to protect the messages 
from spoofing attacks. 

Therefore, it would have been obvious to combine Mann, et al. and Troxel, et al. 
for the benefit of sending messages between nodes in a communications network to 
obtain the invention as specified in claims 21, 21, and 22. 

Claims 27, 28, and 29 are rejected under 35 U.S.C. 103(a) as being 
unpatentable over Mann, et al. as applied to claim 26 above, and further in view of 
Troxel, et al. 

Mann, et al. teach the limitations as set forth under claim 26 above. However, 
Mann, et al. do not disclose expressly that the Internet Key Exchange Protocol (IKE), 
the Security Architecture for the Internet Protocol (IP Security), or the Internet Security 
Association and Key Management Protocol (ISAKMP) may be used. 

Troxel, et al. teach sending messages between nodes in a network using IPSec 
protocols (RFC 2401), Internet Key Exchange Protocol (RFC 2409), and Internet 
Security Association and Key Management Protocol (RFC 2408) (page 5, column 2, 
paragraph 0070). 

Mann, et al. and Troxel, et al. are analogous art because they are from the same 
field of endeavor, sending messages between nodes in a communications network. 

At the time of the invention it would have been obvious to a person of ordinary 
skill in the art to use these three protocols to send messages between nodes in a 
communications network. 
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The suggestion/motivation for doing so would have been to protect the messages 
from spoofing attacks. 

Therefore, it would have been obvious to combine Mann, et al. and Troxel, et al. 
for the benefit of sending messages between nodes in a communications network to 
obtain the invention as specified in claims 27, 28, and 29. 

Claims 35, 36, and 37 are rejected under 35 U.S.C. 103(a) as being 
unpatentable over Mann, et al. as applied to claim 34 above, and further in view of 
Troxel, et al. 

Mann, et al. teach the limitations as set forth under claim 34 above. However, 
Mann, et al. do not disclose expressly that the Internet Key Exchange Protocol (IKE), 
the Security Architecture for the Internet Protocol (IP Security), or the Internet Security 
Association and Key Management Protocol (ISAKMP) may be used. 

Troxel, et al. teach sending messages between nodes in a network using IPSec 
protocols (RFC 2401), Internet Key Exchange Protocol (RFC 2409), and Internet 
Security Association and Key Management Protocol (RFC 2408) (page 5, column 2, 
paragraph 0070). 

Mann, et al. and Troxel, et al. are analogous art because they are from the same 
field of endeavor, sending messages between nodes in a communications network. 

At the time of the invention it would have been obvious to a person of ordinary 
skill in the art to use these three protocols to send messages between nodes in a 
communications network. 
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The suggestion/motivation for doing so would have been to protect the messages 
from spoofing attacks. 

Therefore, it would have been obvious to combine Mann, et al. and Troxel, et al. 
for the benefit of sending messages between nodes in a communications network to 
obtain the invention as specified in claims 35, 36, and 37. 

Claims 41, 42, and 43 are rejected under 35 U.S.C. 103(a) as being 
unpatentable over Mann, et al. as applied to claim 40 above, and further in view of 
Troxel, et al. 

Mann, et al. teach the limitations as set forth under claim 40 above. However, 
Mann, et al. does not disclose expressly that the Internet Key Exchange Protocol (IKE), 
the Security Architecture for the Internet Protocol (IP Security), or the Internet Security 
Association and Key Management Protocol (ISAKMP) may be used. 

Troxel, et al. teach sending messages between nodes in a network using IPSec 
protocols (RFC 2401), Internet Key Exchange Protocol (RFC 2409), and Internet 
Security Association and Key Management Protocol (RFC 2408) (page 5, column 2, 
paragraph 0070). 

Mann, et al. and Troxel, et al. are analogous art because they are from the same 
field of endeavor, sending messages between nodes in a communications network. 

At the time of the invention it would have been obvious to a person of ordinary 
skill in the art to use these three protocols to send messages between nodes in a 
communications network. 
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The suggestion/motivation for doing so would have been to protect the messages 
from spoofing attacks. 

Therefore, it would have been obvious to combine Mann, et al. and Troxel, et al. 
for the benefit of sending messages between nodes in a communications network to 
obtain the invention as specified in claims 41, 42, and 43. 

12. Claims 5, 11, 18, 23, 30, 38, and 44 are rejected under 35 U.S.C. 103(a) as 
being unpatentable over Mann, et al. as applied to claims 1, 7, 14, 19, 26, 34, and 40 
above respectively, and further in view of Leung. 

Mann, et al. teach the limitations as set forth under claims 1, 7, 14, 19, 26, 34, 
and 40 above. However, Mann, et al. do not disclose expressly that the message may 
be used to modify a security association. 

Leung teaches using packets (messages) for configuration, modification, and 
retrieval of security associations (column 5, lines 5-15 and 30-35). 

Mann, et al. and Leung are analogous art because they are from the same field 
of endeavor, sending messages between nodes in a communications network. 

At the time of the invention it would have been obvious to a person of ordinary 
skill in the art to send messages between nodes in a communications network to modify 
a security association. 

The suggestion/motivation for doing so would have been to reduce the 
administrative support required to configure and modify the security associations. 
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Therefore, it would have been obvious to combine Mann, et al. and Leung for the 
benefit of modifying security associations in a communications network to obtain the 
invention as specified in claim 5, 11, 18, 23, 30, 38, and 44. 
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Conclusion 

The prior art made of record in the First Office Action and not relied upon is 
considered pertinent to applicant's disclosure. US Patent Number 6418205, filed May 7, 
1998, inventors: Capers et al., title: Call and circuit state machine for a transaction 
control layer of a communications signaling gateway. Capers et al. teach including 
reasons for action in a message (column 6, line 44, Logoff component). It would have 
been obvious at the time the invention was made to combine the teachings of Capers et 
al. with the system of Mann et al. to customize the system. 

THIS ACTION IS MADE FINAL Applicant is reminded of the extension of time 
policy as set forth in 37 CFR 1 .136(a). 

A shortened statutory period for reply to this final action is set to expire THREE 
MONTHS from the mailing date of this action. In the event a first reply is filed within 
TWO MONTHS of the mailing date of this final action and the advisory action is not 
mailed until after the end of the THREE-MONTH shortened statutory period, then the 
shortened statutory period will expire on the date the advisory action is mailed, and any 
extension fee pursuant to 37 CFR 1.136(a) will be calculated from the mailing date of 
the advisory action. In no event, however, will the statutory period for reply expire later 
than SIX MONTHS from the mailing date of this final action. 

Any inquiry concerning this communication or earlier communications from the 
examiner should be directed to David G. Cervetti whose telephone number is (571) 272- 
5861 . The examiner can normally be reached on Monday-Friday 7:00 am - 5:00 pm, off 
on Wednesday. 
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If attempts to reach the examiner by telephone are unsuccessful, the examiner's 
supervisor, Ayaz R. Sheikh can be reached on (571)272-3795. The fax phone number 
for the organization where this application or proceeding is assigned is 703-872-9306. 

Information regarding the status of an application may be obtained from the 
Patent Application Information Retrieval (PAIR) system. Status information for 
published applications may be obtained from either Private PAIR or Public PAIR. 
Status information for unpublished applications is available through Private PAIR only. 
For more information about the PAIR system, see http://pair-direct.uspto.gov. Should 
you have questions on access to the Private PAIR system, contact the Electronic 
Business Center (EBC) at 866-217-9197 (toll-free). 



' AYAZ SHEIKH 
SUPERVISORY PATENT EXAMINER 
TECHNOLOGY CENTER 2100 




DGC 



